This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json) Hash identifier: q6RPsJkqSPXDxXZY7a02lvFTcRblD21ENzks/zJDugI= Subject key identifier: 47:B6:0C:4B:CD:C3:86:94:34:B1:4E:F1:14:52:21:F9:67:8D:47:30 Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Certificate serial: 019B3721117F539F0B826ACECA1C94B08525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 15:01:12 +0000 Manifest this update: Fri 19 Dec 2025 15:01:12 +0000 Manifest next update: Sat 20 Dec 2025 15:01:12 +0000 Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: OKfkDENW+6CoCrCkaluGaC0rK+727lnRYeaLfXQb6r8=) 2: e8yL6z8TxhAI8s7lifD5i0Vr0cU.roa (hash: nilHfeTYPJt56v6fPn3HSV0r3VH6M1R/PsNJkl8uQHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:11:7f:53:9f:0b:82:6a:ce:ca:1c:94:b0:85:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Validity Not Before: Dec 19 15:01:12 2025 GMT Not After : Dec 20 15:01:12 2025 GMT Subject: CN=47b60c4bcdc3869434b14ef1145221f9678d4730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:4e:47:cd:cb:a7:0c:0b:40:7f:1c:4c:28: 70:3d:92:15:ae:71:16:cc:99:fc:c3:74:e5:08:51: 41:e5:d4:12:9a:53:07:7e:06:a9:dd:ba:33:c6:88: be:f4:b6:9d:af:6f:7f:97:5a:e2:c4:3b:1d:ae:7e: e3:7b:b5:17:6e:f2:2c:0a:2f:dc:b1:5e:66:52:35: 96:8d:db:ed:27:ab:17:68:84:d1:93:52:8c:d4:eb: 2b:f5:78:63:c8:c5:30:9e:12:90:9a:72:dc:88:dc: cc:e1:47:ae:f6:4c:c7:3b:f3:50:c6:d1:68:2d:27: ea:ea:e4:d3:59:08:6d:56:9a:c5:e3:0f:00:71:b8: 68:34:be:db:70:f5:3d:f4:a6:fc:fe:2c:d6:03:1d: 5d:d4:2a:a3:db:03:3d:17:7d:ef:21:e2:58:5b:92: 05:71:c1:37:e8:c9:2c:fd:23:70:50:48:49:a3:24: fa:01:03:12:90:5a:24:62:c3:fa:af:14:e7:f7:9c: da:44:2c:e7:75:e8:a2:ea:ad:99:78:0b:11:4c:99: 7d:84:fe:b6:47:86:ac:64:b2:7c:58:6c:50:cb:7c: 25:03:e8:bb:c7:95:94:5b:14:a1:cf:16:e4:db:73: 71:01:98:5a:00:ca:2b:c2:af:d6:c3:6d:85:e0:ce: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B6:0C:4B:CD:C3:86:94:34:B1:4E:F1:14:52:21:F9:67:8D:47:30 X509v3 Authority Key Identifier: keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f6:7d:79:d3:97:c7:1e:b0:25:a9:dc:7c:48:98:1d:d0:b7: 92:ce:d5:9f:62:19:30:a1:35:85:ff:f5:75:c5:52:05:a7:cf: 8d:31:b2:8c:d9:70:e0:c3:d1:4a:5a:84:0b:b5:8b:62:dc:48: 8c:ba:9c:16:24:43:19:07:15:8b:46:5c:af:dc:2e:b4:a6:8c: aa:2a:6c:96:b5:da:54:da:2e:f5:36:de:b7:de:9d:3d:44:82: b4:db:fb:4b:ff:19:4a:0a:d3:b7:04:bc:aa:d3:53:e9:30:69: f5:27:a4:a3:8d:a8:72:fd:7a:bc:8b:b1:c6:5e:5f:66:48:f0: e2:97:e5:b9:7f:c0:55:f7:f9:e6:0b:ef:15:2b:16:6b:33:4c: dc:ed:9d:3f:78:41:d4:a8:47:ab:11:6b:66:1f:b5:b1:2a:cb: a0:8e:df:ae:6c:be:80:29:78:2e:ea:d8:a5:f1:17:90:dc:d9: 8a:d0:5b:f0:5f:94:fa:16:df:f2:30:f8:8c:60:51:6f:3f:56: 29:fb:59:ce:32:d8:ca:04:13:d5:a7:c7:ad:f9:e2:86:29:62: 44:97:ac:b2:9c:5b:38:2d:77:22:99:a2:31:bb:62:47:8d:bc: 77:a1:4b:fb:43:56:4e:a3:13:f5:56:4a:90:35:8e:19:24:66: 94:09:cc:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IRF/U58LgmrOyhyUsIUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5 ZGRlYjYwHhcNMjUxMjE5MTUwMTEyWhcNMjUxMjIwMTUwMTEyWjAzMTEwLwYDVQQD Eyg0N2I2MGM0YmNkYzM4Njk0MzRiMTRlZjExNDUyMjFmOTY3OGQ0NzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWNOR83LpwwLQH8cTChwPZIVrnEW zJn8w3TlCFFB5dQSmlMHfgap3bozxoi+9Ladr29/l1rixDsdrn7je7UXbvIsCi/c sV5mUjWWjdvtJ6sXaITRk1KM1Osr9XhjyMUwnhKQmnLciNzM4Ueu9kzHO/NQxtFo LSfq6uTTWQhtVprF4w8AcbhoNL7bcPU99Kb8/izWAx1d1Cqj2wM9F33vIeJYW5IF ccE36Mks/SNwUEhJoyT6AQMSkFokYsP6rxTn95zaRCzndeii6q2ZeAsRTJl9hP62 R4asZLJ8WGxQy3wlA+i7x5WUWxShzxbk23NxAZhaAMorwq/Ww22F4M5uWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe2DEvNw4aUNLFO8RRSIflnjUcwMB8GA1UdIwQY MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt NWM5OWI2ODNkYjBkLzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvZ9edOX xx6wJancfEiYHdC3ks7Vn2IZMKE1hf/1dcVSBafPjTGyjNlw4MPRSlqEC7WLYtxI jLqcFiRDGQcVi0Zcr9wutKaMqipslrXaVNou9Tbet96dPUSCtNv7S/8ZSgrTtwS8 qtNT6TBp9Seko42ocv16vIuxxl5fZkjw4pfluX/AVff55gvvFSsWazNM3O2dP3hB 1KhHqxFrZh+1sSrLoI7frmy+gCl4LurYpfEXkNzZitBb8F+U+hbf8jD4jGBRbz9W KftZzjLYygQT1afHrfnihiliRJesspxbOC13IpmiMbtiR428d6FL+0NWTqMT9VZK kDWOGSRmlAnM/Q== -----END CERTIFICATE-----Generated at Fri Dec 19 21:48:43 2025 by rpki-client